Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
File: 6x5t-zkpXJOgRyycE1WUAYqPy1w.mft (raw, json)
Hash identifier: zbk2I5vrqCeWjzq4JxiDgEN8+HrgwS4LZU6S1xVu8mE=
Subject key identifier: 05:EC:9D:71:53:69:78:03:03:B3:1A:73:68:69:A2:1D:75:7E:A3:1A
Authority key identifier: EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
Certificate issuer: /CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Certificate serial: 019A4D05C884DEBB65D696796A5BD5ADCF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
Manifest number: 05FE
Signing time: Tue 04 Nov 2025 04:00:15 +0000
Manifest this update: Tue 04 Nov 2025 04:00:15 +0000
Manifest next update: Wed 05 Nov 2025 04:00:15 +0000
Files and hashes: 1: 6x5t-zkpXJOgRyycE1WUAYqPy1w.crl (hash: eQLXjmHvN27ablCmwQ8tM8Hh+NXwTE9XDYodUzqwmhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:c8:84:de:bb:65:d6:96:79:6a:5b:d5:ad:cf:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1e6dfb39295c93a0472c9c135594018a8fcb5c
Validity
Not Before: Nov 4 04:00:15 2025 GMT
Not After : Nov 5 04:00:15 2025 GMT
Subject: CN=05ec9d715369780303b31a736869a21d757ea31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:fd:06:a8:11:31:73:b2:24:9d:e4:30:fd:
e6:02:bc:96:18:0a:f8:13:41:b6:ea:e2:7b:69:03:
48:1a:42:22:cb:10:6a:75:5e:c4:63:ce:d9:84:ac:
5f:08:9c:81:a8:89:21:13:3b:06:47:84:11:63:32:
00:e5:d5:61:62:9d:32:e5:bb:03:8a:2e:91:58:48:
93:21:87:fd:22:4c:eb:ed:57:24:ce:20:51:42:c0:
5d:5f:b8:1c:f6:fb:b3:f7:3a:d2:6b:0b:98:a5:31:
dd:a1:8e:a7:0c:04:11:2a:42:ac:1a:3a:c8:12:5e:
79:00:a7:8c:ea:69:fd:fb:fa:73:72:80:c2:45:9b:
2a:f0:3c:73:28:e1:2c:74:1e:fd:31:b0:77:e7:45:
f0:d5:99:b5:c3:e5:9e:3c:90:03:3d:50:2e:1e:96:
ff:5d:00:83:f2:b0:79:7d:9c:88:42:cf:c8:78:ca:
b9:96:7c:26:20:99:c1:67:7d:22:21:67:29:7f:0f:
1a:62:2e:67:87:37:08:bd:28:91:3b:29:a8:47:48:
b9:ac:ce:83:b4:c0:c0:fc:9c:40:e0:13:14:94:73:
8c:58:0f:eb:20:9f:03:87:ce:11:a7:63:10:96:20:
84:df:0e:27:2a:77:d6:d5:54:8b:06:82:7a:00:af:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:9D:71:53:69:78:03:03:B3:1A:73:68:69:A2:1D:75:7E:A3:1A
X509v3 Authority Key Identifier:
keyid:EB:1E:6D:FB:39:29:5C:93:A0:47:2C:9C:13:55:94:01:8A:8F:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x5t-zkpXJOgRyycE1WUAYqPy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2e10b2-2597-4eb7-960a-f085af957c8d/1/6x5t-zkpXJOgRyycE1WUAYqPy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:a8:c0:af:f4:3a:a4:ed:72:5e:f8:48:a4:56:fd:04:c3:
c7:6a:67:5a:c3:e8:43:ba:6e:f8:b5:cf:90:ee:65:30:42:ed:
95:ac:b5:5d:1e:30:0e:ae:67:45:6b:35:75:89:6e:87:0f:a2:
5f:d5:05:c3:bb:47:c3:d5:84:33:65:94:2e:f1:2d:93:e6:59:
28:d8:fa:a1:c2:e5:cd:71:6e:80:3f:df:1f:bd:4b:9a:13:2c:
b7:83:fe:89:6f:6c:41:9d:0b:fd:17:39:04:8c:5f:6a:fe:a3:
0b:de:d4:0b:0e:69:7c:d0:da:f8:7d:e9:1d:ad:56:2d:b9:d9:
ba:b0:27:d9:95:0c:99:d4:d9:28:9e:08:b3:e5:87:46:34:46:
29:82:b4:e7:71:cb:e7:a9:e6:a0:55:b9:6a:dc:bc:1b:e4:1a:
17:14:f3:d5:61:d1:6c:f6:82:0b:04:fd:57:99:ea:89:a9:d1:
83:3b:9f:0a:2b:5d:cc:09:3c:b4:ba:e3:9a:5a:1f:56:df:03:
dd:4c:a6:13:54:24:d1:7e:4c:e3:cb:a9:5a:eb:db:5a:0b:fd:
22:a0:30:b2:7b:43:89:36:a9:19:55:89:f3:cd:5c:10:4f:7d:
b6:73:b0:91:8f:e3:0d:9a:2b:5a:0b:9c:d7:14:0c:9c:e0:76:
27:61:eb:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBciE3rtl1pZ5alvVrc+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMWU2ZGZiMzkyOTVjOTNhMDQ3MmM5YzEzNTU5NDAxOGE4
ZmNiNWMwHhcNMjUxMTA0MDQwMDE1WhcNMjUxMTA1MDQwMDE1WjAzMTEwLwYDVQQD
EygwNWVjOWQ3MTUzNjk3ODAzMDNiMzFhNzM2ODY5YTIxZDc1N2VhMzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r79BqgRMXOyJJ3kMP3mAryWGAr4
E0G26uJ7aQNIGkIiyxBqdV7EY87ZhKxfCJyBqIkhEzsGR4QRYzIA5dVhYp0y5bsD
ii6RWEiTIYf9Ikzr7VckziBRQsBdX7gc9vuz9zrSawuYpTHdoY6nDAQRKkKsGjrI
El55AKeM6mn9+/pzcoDCRZsq8DxzKOEsdB79MbB350Xw1Zm1w+WePJADPVAuHpb/
XQCD8rB5fZyIQs/IeMq5lnwmIJnBZ30iIWcpfw8aYi5nhzcIvSiROymoR0i5rM6D
tMDA/JxA4BMUlHOMWA/rIJ8Dh84Rp2MQliCE3w4nKnfW1VSLBoJ6AK/MkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXsnXFTaXgDA7Mac2hpoh11fqMaMB8GA1UdIwQY
MBaAFOsebfs5KVyToEcsnBNVlAGKj8tcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEt
ZjA4NWFmOTU3YzhkLzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yZTEwYjItMjU5Ny00ZWI3LTk2MGEtZjA4NWFmOTU3Yzhk
LzEvNng1dC16a3BYSk9nUnl5Y0UxV1VBWXFQeTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuCowK/0
OqTtcl74SKRW/QTDx2pnWsPoQ7pu+LXPkO5lMELtlay1XR4wDq5nRWs1dYluhw+i
X9UFw7tHw9WEM2WULvEtk+ZZKNj6ocLlzXFugD/fH71LmhMst4P+iW9sQZ0L/Rc5
BIxfav6jC97UCw5pfNDa+H3pHa1WLbnZurAn2ZUMmdTZKJ4Is+WHRjRGKYK053HL
56nmoFW5aty8G+QaFxTz1WHRbPaCCwT9V5nqianRgzufCitdzAk8tLrjmlofVt8D
3UymE1Qk0X5M48upWuvbWgv9IqAwsntDiTapGVWJ881cEE99tnOwkY/jDZorWguc
1xQMnOB2J2HrKA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:24 2025 by rpki-client